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We present a stable and deterministic quantum key distribution (QKD) system based on differ- 
ential phase shift. With three cascaded Mach-Zehnder interferometers with different arm-length 
differences for creating key, its key creation efficiency can be improved to be 7/8, more than other 
' systems. Any birefringence effects and polarization-dependent losses in the long-distance fiber are 

automatically compensated with a Faraday mirror. Added an eavesdropping check, this system is 
more secure than some other phase-coding-based QKD systems. Moreover, the classical information 
^ ' exchanged is reduces largely and the modulation of phase shifts is simplified. All these features 

make this QKD system more convenient than others in a practical application. 
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^ ■ I. INTRODUCTION 

Quantum key distribution (QKD) [l[ supplies a novel way for generating a private key securely between two legitimate 
users, say the sender Alice and the receiver Bob. Its security is based on the laws in quantum mechanics such as 
' noncloning theorem, coherence of entangled systems, and quantum measurement, but not the computation difficulty 
Q^l with a limited computation power. As an unknown quantum state cannot be cloned 0, the action done by a vicious 
eavesdropper, say Eve will inevitably disturb the quantum system and leave a trace in the outcome obtained by the 
' two legitimate users. Alice and Bob can detect the eavesdropping by analyzing the error rate of a subset of instances 



chosen randomly. Since Bennett and Brassard published an original protocol in 1984 (BB84)[3|, QKD attracts a great 
' deal of attention [1, H S, i, 0, 13 • 
, The experimental implementation of long-distance QKD over an optical fiber channel requires the two legitimate 
' users to control the influence of the fluctuation of the birefringence which alters the polarization state of photons. 
C5 ■ For overcoming this noise, several elegant QKD schemes have been developed with some unbalanced Mach-Zehnder 
I interferometers (MZIs), such as the QKD scheme base on the phase difference of single photon [1, [T^jllli, the "plug 
' and play" system and its modifications [H, [3, [l^, [l^, the QKD system based on faithful qubit distribution 
OO , with additional qubits , and the QKD system with faithful single-qubit transmission [ll] . With the development 
of technology, the QKD system based on faithful qubit distribution [l^ seems to be perfect if there is an ideal 
single-photon source which can produce two photons in a deterministic time, although the success probability of this 
system for BB84 protocol is no more than 1/16 in principle in a passive way. The QKD system with the faithful 
single-qubit transmission technique 18] is more efficient than that in Ref.[l3] as it only requires one photon in each 
> signal time and the qubit transmitted can reject the error arisen from collective noise by itself. Its success probability 
for generating a private key is 1/4 in theory with BB84 protocol in an absolutely passive way. With some cascaded 
unbalanced Mach-Zehnder interferometers (MZIs), a special encoder and a special decoder one-way QKD can 
be implemented against collective noise (with which the fluctuation is so slow in time that the alteration of the 
polarization is considered to be the same over the sequence of several photons or wavepackets [l7j ) in a passive way 
with a success probability approaching the intrinsic one in BB84 QKD protocol ^. 

In those QKD protocols with phase coding [§, [l^, [HI [H, [H, [13, [H, [ll] , the two legitimate users need not share a 
reference frame for choosing the common polarization bases, which makes these protocols more convenient than those 
with polarization coding in a practical application. The influence of the birefringence effect in flbers on the one-way 
QKD systems [l,[i3)[iil is far more severe than that on the two-way "plug andglay" QKD systems J.2,il3j. Thus "plug 
and play" QKD systems [11 [H, [3 

based on differential phase shift (DPS) [11| were proposed for increasing the key 
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creating efficiency witli some unbalanced MZIs and Faraday mirrors. These systems are stable as the Faraday mirrors 
can be used to automatically compensate for birefringence and polarization-dependent losses in the transmission fiber 
[l5l |. Although these systems [l3,[l3,[IB| are better than some others, there are some spaces for improving. First, most 
faint laser pulses split by the front Mach-Zehnder interferometer (MZI) are combined again by the next ones, which 
makes the key creation efficiency improved be limited. Second, in order to compensate for the amplitude differences 
caused by the overall interference of pulses travelling through different paths, phase shifters should be inserted in the 
long arms of MZIs, which increases the complexity and decreases stability of the system. Moreover, as there is no 
eavesdropping check process in the first transmission, the systems are vulnerable to an eavesdropping technique known 
as the intercepting-resending attack Q. As pointed out in Ref. [20|, for each block of transmission, an eavesdropping 
checking is inevitable for secure communication no matter what is transmitted with a quantum channel. 

In this paper, we propose a stable and deterministic QKD system based on DPS with a high key creation efficiency 
approaching 100% by using the least cascaded MZIs with different arm-length differences. Compared with that in 
Ref. [15.]. the key generation efficiency is 7/8 in principle, more than 3/4, when the two parties exploit three MZIs 
for creating their private key. Its security is much higher than the latter. Moreover, this system is stable and 
deterministic. Any birefringence effects and polarization-dependent losses in the long-distance fiber are automatically 
compensated with a Faraday mirror. The modulation of the phase shifts is also more easier than others, and the 
classical information exchanged is reduced largely. 

II. STABLE AND DETERMINISTIC QKD SYSTEM 

Fig.l shows the setup of our QKD system based on DPS. It is made up of three cascaded MZIs (MZIi, MZI2, and 
MZI3) in Bob's site for creating a private key, and a Faraday mirror and a phase modulator in Alice's site. Similar 
to Ref. [ll,[i^, the MZIs, with long and short arms connected by 50%:50% fiber couplers Ci - C5, are designed to 
have different arm-length differences so that each pulse split by the front MZI does not overlap with others in the 
process of preparing the quantum signal. The time delays between the long and the short arm of MZIi, MZI2, and 
MZI3 are 4T, 2T, and T, respectively. The Faraday mirror is used to automatically compensate for birefringence and 
polarization-dependent losses in the transmission fiber. The phase modulator is used to encode the key. 




FIG. 1: Stable and deterministic DPS-based QKD system with a key creation efflciency of 7/8. LD represents laser diode. 
C1-C7 represent 50%:50% couplers. MZIi, MZI2, MZI3, and MZI4 are four Mach-Zehnder interferometers with different arm- 
length differences 4T, 2T, T, and T, respectively. L1-L4 and S1-S4 are the long (L) arms and the short (S) arms of MZIs, 
respectively. D1-D4 are four avalanche photon detectors. PM, FM, and A represent a phase modulator, a Faraday mirror, and 
an attenuator, respectively. For eavesdropping check, Alice samples a subset of quantum signals with beam splitter (BS) and 
measured them with another MZI (MZI4) by choosing two bases (0^ G {0,7r/2}). 



An original pulse ipi = e~"^''|ii) from a laser diode is split into two sequential pulses with a time interval 4T by 
passing through MZIi, i-e., 1P2 — e^*"^" \ti) and ^/;| — e""^" \t^) are combined at the second coupler C2 at time instances 
ti and t^. Where <j)Q is the initial phase factor and the subscript 2 in tp'!^ is used to label the second coupler. We 
neglect the global factor in each pulse in this paper. Subsequently, each of the pulses is split into two sequential pulses 
by MZI2 with a time interval 2T, i.e., there are four pulses described as 

^1 = e-'^^lis), Vl = e-'^1M- (1) 
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After MZI3 with a time interval T, there are eight sequential pulses arriving at the coupler C5. These eight pulses 
have the same amplitude and the delay between two near pulses is T (shown in Fig. 2). These eight pulses can be 
described as 
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where (ps is a phase shift added by Bob for preparing the quantum signal. Bob chooses randomly one of the four phase 
shifts {0, 7r/2, TT, 37r/2} for each original pulse ■01 = e~*'^°|ti) in the quantum communication. That is, Bob chooses 
four nonorthogonal phase-coding states to carry the message transmitted, which is similar to the way in polarization 
coding that the two legitimate users choose four nonorthogonal states {|0), (|0) + |l))/-\/2, (|0) — |1))/V2} to 
complete a deterministic quantum communication [21I [23 • This feature can forbid an eavesdropper to eavesdrop the 
QKD system freely with intercepting-rescnding attack Q]. 
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FIG. 2: Process of the key creation. A pulse from the LD is split into two pulses after travelling through MZIi, and MZI2 and 
MZI3 split them into four and eight pulses, respectively. When these pulses are reflected back after coding, 7/8 of the pulses 
interfere at the coupler C4 and can be used to generate the private key, higher than 3/4 in Ref. [isi ]. 



When the eight pulses arrive at Alice's site, she first attenuates the signal with a variable attenuator and then 
encodes her random key on the odd pulses with the same phase shift (pA € {0, tt}. and tt represent the bit values in 
key string and 1, respectively. After the coding performed by Alice, the quantum signal becomes 

iPa = e"''('^°+'^'^)|ii) +e-'('^°+"*«)|i2) +e"*('^°+'^-*)|t3) 

+ e-'^'''"+'''^^\t^) +e-'^'t">+'>"'^\h). (3) 

Alice reflects the quantum signal to Bob by a Faraday mirror, same as Ref. [T2|. [Tsl. [l^. [TBI, [l^ . 

When the pulses are reflected to Bob's site and pass through the MZI3 and the coupler C4, their state becomes 

+ Ite) + Its)) + + e-^f'-){\h) + \t^) 

+ |t7))+e-2^^«|t9)}. (4) 

Bob can read out the key with success probability 7/8 by using two detectors Di and Z?2. When (f)A — 0, the pulse 
train clicks the detector Di at the time instances ^4, ^6? or tg; Otherwise, it clicks the detector D2 at one of these 
four time instances. At the other three time instances ta, t^, and ty, the detector clicked depends on both the phase 
shifts 4'A and (t>B, shown in Eq.(|3]). In detail, when 2(f) b ®2tt — (t)A, the pulse train clicks the detector Di at the time 
instances ta, ^5, or ty; Otherwise, it clicks the detector Z?2. In a word. Bob can obtain the key with his phase shift (j)B 
at the time instances ^2, ta, ^5, ^6, i^^ or tg in a deterministic way. At the time instances ti and tg, no interference 
takes place and the pulse train will click one of the two detectors randomly, which happens with the probability 1/8. 
Bob discards these useless time instances. In quantum communication. Bob need only tell Alice the fact that he 
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detects a photon or not in the useful time instances, which will reduce the classical information exchanged largely, 
compared with that in Ref . p^. [T6| as Bob does not announce the detailed time slots. 

In order to prevent Eve from eavesdropping with intercepting-resending attack strategy, we add a phase shift 
4>B G {0, 7r/2, IT, 3tt/2} in Bob's site. Moreover, a eavesdropping check is designed in Alice's site. That is, Alice should 
sample some quantum signals randomly and measure them with two nonorthogonal phase bases, shown in Fig.l, 
same as Ref.[2ll [2^ . Without these two tricks, this DPS QKD protocol is insecure. We give the detail of a special 
intercepting-resending attack strategy to demonstrate the necessity of the procedure of eavesdropping check. This 
strategy works in the protocols in Refs.^4, 15, 16], which means these two QKD protocols is insecure in principle. For 
obtaining the phase shifts performed by Alice, Eve first intercepts all the eight pulses travelling through the coupler 
C5 and then stores them. She prepares another pulse a and splits it into two parts, b and c. For evading the energy 
check done by Alice, Eve controls the intensity of her pulses b and c to be equal to each of the eight pulses |ti)-|i8) sent 
by Bob. Eve sends the part c to Bob, instead of each of the eight pulses. No matter what the phase shift (f>A S {0, tt} 
is chosen by Alice, Eve can in principle get this information by interfering the part b with c when it is reflected from 
Alice. In this way, Eve can pretend Alice and encodes Alice's phase shift on the original eight pulses and resends them 
to Bob. This attack will in principle leave nothing in the outcome obtained by the two legitimate users. The same 
way can be used to attack the quantum communication in Refs. [isl. 1 16] . For example, for the pulse train Pi in 
Ref. 15], Eve replaces the original one with the part c and sends it to Alice. No matter what the phase shift is chosen 
by Alice from the two values {tt/S, 47r/3}, Eve need only add a phase shift —2tt/3 on the part b and then interfere it 
with the part c reflected by Alice. Obviously, Eve can determine that the phase shift performed by Alice is 7r/3 or 
Att/3 in principle. The phase shifts on the other three pulse train P2, P3, and P4 can also be obtained in the same 
way. In essence, this insecurity comes from the lack of the eavesdropping check done by Alice. As pointed out in Ref. 
[20|, for each block of transmission, an eavesdropping checking is inevitable for secure communication no matter what 
is transmitted with a quantum channel. This principle can be used to ensure the security of our DPS QKD system. If 
the influence of the birefringence effect in fiber is large enough, Alice should prepare a subset of nonorthogonal pulses 
with which she replace some signal pulses with a probability pd for preventing Eve from measuring the pulses reflected 
by Alice. She can produce her nonorthogonal pulses by randomly adding one of the two phase shifts 4>a S {Oi'^'/S} 
on some signal pulses. In this time. Bob should modulate her another phase shift (p'g E {0,7r/2} besides (pB with a 
small probability. For improving the key creation rate, Alice and Bob can use two biased phase bases to prepare and 
measure the nonorthogonal pulses, same as that in Ref. Q. 

III. SUMMARY 

In summary, we have proposed a stable and deterministic QKD system based on DPS. The most specific feature of 
this DPS QKD system is the high key creation efficiency and the high security. By using three MZIs with different 
arm-length differences for creating key (the fourth MZI is used to check eavesdropping), the efficiency is improved to 
be 7/8, more than 3/4 in Ref. [la]. Moreover, this system is expansible. With n MZIs for creating the key, the key 
creation efficiency can be added up to ^^""^ , higher than in Ref. j^] (much higher than that in Ref.p^l. When 
n is large enough, the efficiency approaches 100%. Another feature is the high security. With eavesdropping check 
and nonorthogonal pulses, this QKD system is obviously more secure than that in Ref. [l5|. Moreover, this system 
is stable and deterministic, and the classical information exchanged is reduced largely. 
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